Version 1.1.7 of the SPDX Java Library

What's Changed

• add Maven Central badge by @hboutemy in #175
• Preserve order in collections. by @carmenerre in #176

New Contributors

• @hboutemy made their first contribution in #175
• @carmenerre made their first contribution in #176

Full Changelog: v1.1.6...v1.1.7

Version 1.1.6 of the SPDX Java Library

What's Changed

• Make ModelObject threadsafe on create and getObjectPropertyValue by @goneall in #170
• Check for ReferenceType in simpleUri toObjectValue by @goneall in #172
• Use non-greedy matches at start of textWith by @goneall in #173

Full Changelog: v1.1.5...v1.1.6

Release 1.1.5 of the SPDX Java Library

What's Changed

• Fixes issue 152 by @pmonks in #154
• verifyDownloadLocation error message clarification by @mathjeff in #157
• Always verify related elements by @goneall in #159
• Add 'var' text support for matching within text by @goneall in #156
• Move license matching code which removes underlines by @goneall in #160
• Update license list cache to version 3.20 by @goneall in #161
• Fix line separator matching by @goneall in #163

New Contributors

• @mathjeff made their first contribution in #157

Full Changelog: v1.1.4...v1.1.5

Release 1.1.4 of the SPDX Java Library

What's Changed

Fixes a significant bug where lists of licenses which mix NOASSERTION or NONE with other license types fail

• Use hash maps for all collections by @goneall in #148
• Issue 149: Add auto-generation and publication of API JavaDocs by @pmonks in #150
• Add merchantability to license compare similar words by @goneall in #151

Full Changelog: v1.1.3...v1.1.4

Release 1.1.3 of the SPDX Java Library

What's Changed

• Note that order for collections such as checksums and external references are no longer preserved. See issue #146 for more information.
• Add an option to not copy license details in CopyManager by @goneall in #140
• Don't store filesAnalyzed if not present by @goneall in #143
• Minor performance improvements by @goneall in #144
• Add new license equivalent words by @goneall in #138
• Add capability to search for listed license text inside other text by @pmonks in #145

New Contributors

• @pmonks made their first contribution in #145

Full Changelog: v1.1.2...v1.1.3

Release 1.1.2 of the Java SPDX Library

What's Changed

• Add warning if a LicenseRef is not present by @goneall in #125
• Delete relationships on RelatedElementCollection.remove by @goneall in #127
• Update SLF4J to version 2.18.0 by @goneall in #128
• Minor POM file files by @goneall in #129
• Update version info by @goneall in #132
• Make licenseInfoInFile optional in SdpxFileBuilder by @goneall in #133
• Change replacable -> replaceable by @goneall in #136
• Refactor ExtractedLicenseInfo to use abstract class by @goneall in #137

Full Changelog: v1.1.1...v1.1.2

Release 1.1.1 of the SPDX Java Library

Contains various fixes including one security related fix in the jsoup dependency

What's Changed

• Bump jsoup from 1.14.2 to 1.15.3 by @dependabot in #99
• Fail a license compare if there is text following a matching license by @goneall in #97
• Fix a few possible issues identified by Sonatype Lyft by @goneall in #100
• Add more detail to package level compare information by @goneall in #101
• Add a getter for the License Model Store by @goneall in #102
• Change generated IDs to a more unique prefix by @goneall in #104
• [Issue 105] Fix ModelObject#equivalent not being symmetric by @nicoweidner in #106
• Add attributionText to snippetBuilder by @goneall in #113
• Copy properties when cloning a ModelObject by @goneall in #110
• Improve parse exception error handling by @goneall in #123
• Override equals for IndividualUriValues by @goneall in #112
• Fail when creating an SPDX ID with a different type by @goneall in #121
• [issue-114] Make sure that list equivalence is symmetric by @nicoweidner in #122
• Add unit test for DocumentDescribes by @goneall in #118

New Contributors

• @nicoweidner made their first contribution in #106

Full Changelog: v1.1.0...v1.1.1

Version 1.1.0 of the SPDX Java Library

What's Changed

• Support for the SPDX 2.3 specification
• Correct the URI for relationship type AMENDS by @goneall in #77
• add license black list & white list detect function in LicenseCompareHelper by @XenoAmess in #80
• Update Java library for the SPDX 2.3 spec release by @goneall in #87
• Bump gson from 2.8.0 to 2.8.9 by @dependabot in #86
• Change Package hasFiles from a list property to a relationship collection by @goneall in #70
• Change error message when unable to access spdx.org/licenses by @goneall in #88
• Add dashes as an allowed character for git download URLs by @goneall in #90
• Update license cache to verion 3.17 by @goneall in #91
• Compatibility fixes for the 2.3 updates by @goneall in #92
• Track the last reason for equivalent failing by @goneall in #93
• Make no assertion license equiv. to null by @goneall in #94
• Add back reference types accidentally deleted by @goneall in #95
• Make the LicenseJsonTOC publicly accessible by @goneall in #96

New Contributors

• @XenoAmess made their first contribution in #80

Full Changelog: v1.0.10...v1.1.0

Release 1.0.10 of the SPDX Java Library

What's Changed

• Update log4j version to 2.17.0 - resolves known vulnerabilities in Log4j CVE-2021-45105
• Add swh to known listed reference types by @goneall in #68
• Update CI to work for external github accounts by @goneall in #72
• Update log4j version to 2.15.0 by @seabass-labrax in #71 resolves known vulnerabilities in Log4j CVE-2021-44228 and CVE-2021-45046
• Fix a typo in the reference category enumerations by @goneall in #73
• Update spdx-maven-plug to version 0.5.5 by @goneall in #74

New Contributors

• @seabass-labrax made their first contribution in #71

Full Changelog: v1.0.9...v1.0.10

Release 1.0.9 of the SPDX Java Library

Fixes download location regular expression - PR #67
java-spdx-library-1.0.9.zip